Package Details: librewolf-bin 1:136.0.0_2-1

Git Clone URL: https://aur.archlinux.org/librewolf-bin.git (read-only, click to copy)
Package Base: librewolf-bin
Description: Community-maintained fork of Firefox, focused on privacy, security and freedom.
Upstream URL: https://librewolf-community.gitlab.io/
Keywords: browser web
Licenses: GPL, MPL, LGPL
Conflicts: librewolf
Provides: librewolf
Submitter: lsf
Maintainer: lsf
Last Packager: lsf
Votes: 449
Popularity: 37.04
First Submitted: 2019-06-16 13:12 (UTC)
Last Updated: 2025-03-06 09:04 (UTC)

Dependencies (16)

Required by (32)

Sources (7)

Pinned Comments

lsf commented on 2021-11-10 12:14 (UTC) (edited on 2023-04-17 07:18 (UTC) by lsf)

https://wiki.archlinux.org/title/Arch_User_Repository#Acquire_a_PGP_public_key_if_needed

gpg --keyserver hkp://keyserver.ubuntu.com --search-keys 031F7104E932F7BD7416E7F6D2845E1305D6E801

/edit: starting with 112.0-1, the binaries are signed with the maintainers shared key, so gpg --keyserver hkp://keyserver.ubuntu.com --search-keys 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 should do the trick instead. I've also signed the key with the previously used key, so you have at least some guarantee that it's not a malicious attack :)

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7 8 9 .. 20 Next › Last »

impulse commented on 2024-06-23 19:32 (UTC)

Can you please add me as a co-maintainer so i can keep this package up-to-date?

lsf commented on 2024-04-29 06:40 (UTC)

For anyone interested: this is the upstream change that caused this issue for those on Manjaro, where pacman is still behind.

I've just pushed an 1.1 that just skips the git source checksum again for now.

karolyi commented on 2024-04-28 22:30 (UTC)

@Dawa I'm on Manjaro too. As stated earlier, it's a bit behind on package versions. I can live with Librewolf 124, we'll just have to wait for the next manjaro update (and see what it breaks)

Dawa commented on 2024-04-26 19:26 (UTC)

I'm on evil, evil, evil Manjaro (my apologies, I blame society) and yes the update is broken. Not eager to just skip hash checks in the wake of the whole xz thing. Not interested in switching to another update method. Looking forward to some kind of update here. Thanks lsf for maintaining this package.

spsf64 commented on 2024-04-26 17:08 (UTC)

Everyone using manjaro could stop complaining and just try to use the appimage which should work fine for you... Link:

https://librewolf.net/installation/linux/

ron2138 commented on 2024-04-26 16:47 (UTC) (edited on 2024-04-26 16:47 (UTC) by ron2138)

Manjaro site shows

  • pacman April 26, 2024: stable has 6.0.2-18, testing has 6.1.0-7, unstable has 6.1.0-7
  • pacman-contrib April 26, 2024: stable has 1.10.4-1, testing has 1.10.5-1, unstable has 1.10.5-1

As stated earlier I, ron2138, use pacman 6.0.2-9 and pacman-contrib 1.10.4-3. Current versions in arch stable are 6.1.0-3, and 1.10.5-1, respectively. For arch stable, pacman 6.1.0-3 is 6.0.2-9 successor. While pacman-contrib had 1.10.4-4 in between 1.10.4-3 and 1.10.5-1.

muvvenby commented on 2024-04-26 08:36 (UTC)

FWIW I have this issue with the failing validity check on Manjaro stable install with pamac and yay. I could check later with my EndeavourOS install.

ron2138 commented on 2024-04-26 00:53 (UTC) (edited on 2024-04-26 16:33 (UTC) by ron2138)

With the suggested SKIP checksum, I get:

$ makepkg --verifysource --force
==> Making package: librewolf-bin 125.0.2-1 (Fri 26 Apr 2024 12:23:23 AM UTC)
==> Retrieving sources...
  -> Updating source git repo...
  -> Found default192x192.png
  -> Found librewolf.desktop
  -> Found librewolf-125.0.2-1-linux-x86_64-package.tar.bz2
  -> Found librewolf-125.0.2-1-linux-x86_64-package.tar.bz2.sig
==> Validating source files with sha256sums...
    source ... Skipped
    default192x192.png ... Passed
    librewolf.desktop ... Passed
==> Validating source_x86_64 files with sha256sums...
    librewolf-125.0.2-1-linux-x86_64-package.tar.bz2 ... Passed
    librewolf-125.0.2-1-linux-x86_64-package.tar.bz2.sig ... Skipped
==> Verifying source file signatures with gpg...
    librewolf-125.0.2-1-linux-x86_64-package.tar.bz2 ... Passed

(The reason for --force is because I already built the package. makepkg is not willing to run without it.)

I think it does validate the source after the SKIP at sha256sums is evaluated.

==> Validating source_x86_64 files with sha256sums...
    librewolf-125.0.2-1-linux-x86_64-package.tar.bz2 ... Passed
    librewolf-125.0.2-1-linux-x86_64-package.tar.bz2.sig ... Skipped

I haven't looked what was in the PKGBUILD in previous versions. The current problem could be related to the source, source_aarch64, source_x86_64, sha256sums, sha256sums_x86_64, and sha256sums_aarch64 arrays. And the way makepkg verifies the sums. I agree this is what is being called hands waiving rather then a concise explanation. But, since there is a source_x86_64 verification, I have not tried harder.

I have this issue, and I am not on Manjaro. As lsf suggested at 2024-04-25 19:51 (UTC), I deliberately keep pacman/pacman-contrib versions behind. I have other issues with the up to date versions, which is why I have downgraded. Waiting to see if those issues get resolved in their next versions. On the other hand, even though I am hardly building AUR packages, this is the 1st time I run into such an issue. Could it be the very few other AUR packages I built lately have issues I am not aware of?

lsf commented on 2024-04-25 19:51 (UTC) (edited on 2024-04-25 19:58 (UTC) by lsf)

*she.

more to the point though: while it still builds/verifies cleanly for me, it doesn't make sense to have a checksum on a folder / git checkout. I didn't manually add it, I usually just trust updpkgsums to do its job. For some reason though, it insists on adding a checksum… for the git checkout's folder this time.

So skipping the verification for that checkout would be a reasonable approach for now. I'll still try to find out why it's in there this time around at all, and then see about updating the PKGBUILD ^^

(sorry for the trouble this seems to have caused!)

/edit: just in case: are those folks who have that issue on manjaro? maybe it's just part of the newer(ish) pacman/pacman-contrib versions, seems like manjaro is a bit behind there still?

« First ‹ Previous 1 2 3 4 5 6 7 8 9 .. 20 Next › Last »